Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa
File:                     3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa (raw, json)
Hash identifier:          /hbAfFeqiAtcDh+f0pIuCXzn8Ex5FcHsVJ4k8ss8L/E=
Subject key identifier:   78:89:94:BD:CB:00:9D:BF:0C:54:F0:DC:D8:56:CD:55:25:97:D0:60
Certificate issuer:       /CN=A561916EB1A61E110D909C0CA2D8F6759A3F0EA4
Certificate serial:       2EB9FEDEBFBA7D4F2B8E70803CD63A710D356850
Authority key identifier: A5:61:91:6E:B1:A6:1E:11:0D:90:9C:0C:A2:D8:F6:75:9A:3F:0E:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa
Signing time:             Mon 13 Mar 2023 18:56:01 +0000
ROA not before:           Mon 13 Mar 2023 18:51:01 +0000
ROA not after:            Mon 11 Mar 2024 18:56:01 +0000
asID:                     262285
IP address blocks:        177.52.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b9:fe:de:bf:ba:7d:4f:2b:8e:70:80:3c:d6:3a:71:0d:35:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A561916EB1A61E110D909C0CA2D8F6759A3F0EA4
        Validity
            Not Before: Mar 13 18:51:01 2023 GMT
            Not After : Mar 11 18:56:01 2024 GMT
        Subject: CN=788994BDCB009DBF0C54F0DCD856CD552597D060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:ec:44:4d:57:8a:11:ba:4f:b6:a7:ed:56:
                    90:e5:0c:24:28:91:df:29:1c:38:6c:19:5e:7b:be:
                    b4:07:c1:c7:32:7f:e9:77:f6:0a:84:74:ff:63:63:
                    97:98:6c:d6:7a:8d:82:c6:07:90:2c:d3:57:a3:f8:
                    77:04:6a:72:db:98:88:ff:be:75:9e:79:a4:1a:ae:
                    ec:58:2b:6a:5f:83:59:9b:31:9e:cf:90:7e:16:57:
                    1f:f8:15:ff:64:94:41:e8:ee:b5:3c:64:6a:9f:59:
                    ec:ce:ee:81:df:75:74:51:e6:98:80:82:a4:80:1d:
                    ee:82:7e:07:41:13:42:9c:dc:c6:96:0a:47:c7:16:
                    38:e9:e4:2c:f6:3b:d3:84:a7:55:54:66:bb:fb:f4:
                    30:b2:0c:7c:20:26:b5:a8:38:5f:d7:36:2d:a2:93:
                    72:14:89:8e:4e:ed:ea:10:c8:3f:8d:58:98:88:9b:
                    e9:ca:30:c9:56:b5:fc:35:2e:97:95:76:e4:42:a6:
                    25:2c:bc:97:f3:d0:ec:f0:b8:0c:9c:39:0d:13:cd:
                    4c:59:e5:1c:22:cd:e4:0a:52:f3:2c:9d:88:8b:c7:
                    8b:28:2c:7b:65:3c:00:67:4e:95:3f:f3:aa:3f:d3:
                    dc:f6:ab:d6:fd:06:29:dd:7c:54:4c:37:75:47:61:
                    4b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:89:94:BD:CB:00:9D:BF:0C:54:F0:DC:D8:56:CD:55:25:97:D0:60
            X509v3 Authority Key Identifier:
                keyid:A5:61:91:6E:B1:A6:1E:11:0D:90:9C:0C:A2:D8:F6:75:9A:3F:0E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:07:f2:ea:6a:a8:75:43:e4:2c:63:c7:b2:0a:91:57:1e:34:
         bd:07:90:e3:de:69:98:0a:52:b4:b1:3a:07:40:62:7a:50:d7:
         5f:86:84:8c:f8:9b:22:55:0d:4c:63:9b:63:15:ea:ed:f3:83:
         7d:78:0e:ca:f8:0a:b6:9f:db:7e:28:d9:9b:a8:46:aa:0c:8a:
         5f:b4:4b:32:d6:7e:0a:2a:e4:d5:d3:2a:9c:64:a8:0e:8c:03:
         52:ec:e2:c3:de:87:32:b8:59:0c:2c:45:2d:ab:38:ec:58:d0:
         c9:66:07:1f:43:b8:45:a4:f8:ab:dd:46:76:5b:e3:f1:ac:54:
         84:fb:59:da:74:b2:d0:a0:a3:94:66:cf:65:37:fb:0d:da:fd:
         3d:33:79:a5:93:37:a9:a7:d3:5d:65:05:27:23:59:d5:21:66:
         d7:15:60:ac:12:e8:64:52:26:b4:e9:a8:a6:9a:09:a0:9f:b8:
         79:07:67:c6:c3:b1:2e:4e:d6:67:67:a5:af:19:89:92:dc:be:
         e7:b4:d4:6e:16:09:02:a6:94:8f:5a:24:05:a8:9e:51:bb:c3:
         97:2c:07:e4:30:3c:05:51:1a:fa:c7:7b:0e:e0:46:25:82:60:
         6f:82:73:1b:68:ac:37:66:ac:78:1e:4e:a2:70:39:96:fd:2a:
         83:76:bf:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULrn+3r+6fU8rjnCAPNY6cQ01aFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2MTkxNkVCMUE2MUUxMTBEOTA5QzBDQTJEOEY2NzU5
QTNGMEVBNDAeFw0yMzAzMTMxODUxMDFaFw0yNDAzMTExODU2MDFaMDMxMTAvBgNV
BAMTKDc4ODk5NEJEQ0IwMDlEQkYwQzU0RjBEQ0Q4NTZDRDU1MjU5N0QwNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp+xETVeKEbpPtqftVpDlDCQo
kd8pHDhsGV57vrQHwccyf+l39gqEdP9jY5eYbNZ6jYLGB5As01ej+HcEanLbmIj/
vnWeeaQaruxYK2pfg1mbMZ7PkH4WVx/4Ff9klEHo7rU8ZGqfWezO7oHfdXRR5piA
gqSAHe6CfgdBE0Kc3MaWCkfHFjjp5Cz2O9OEp1VUZrv79DCyDHwgJrWoOF/XNi2i
k3IUiY5O7eoQyD+NWJiIm+nKMMlWtfw1LpeVduRCpiUsvJfz0OzwuAycOQ0TzUxZ
5RwizeQKUvMsnYiLx4soLHtlPABnTpU/86o/09z2q9b9BindfFRMN3VHYUtXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeImUvcsAnb8MVPDc2FbNVSWX0GAwHwYDVR0j
BBgwFoAUpWGRbrGmHhENkJwMotj2dZo/DqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU0yRmdyd2ZWSnlVb3dUVTg4NlI0anRobjdHSFdoOVJXZGNrOWJMWGtV
VEgvMC9BNTYxOTE2RUIxQTYxRTExMEQ5MDlDMENBMkQ4RjY3NTlBM0YwRUE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E1NjE5MTZFQjFBNjFFMTEw
RDkwOUMwQ0EyRDhGNjc1OUEzRjBFQTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNMkZncndmVkp5VW93VFU4ODZSNGp0aG43R0hXaDlSV2RjazliTFhrVVRILzAv
MzEzNzM3MmUzNTMyMmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxNPQwDQYJKoZIhvcNAQELBQADggEBAMkH8upq
qHVD5Cxjx7IKkVceNL0HkOPeaZgKUrSxOgdAYnpQ11+GhIz4myJVDUxjm2MV6u3z
g314Dsr4Craf234o2ZuoRqoMil+0SzLWfgoq5NXTKpxkqA6MA1Ls4sPehzK4WQws
RS2rOOxY0MlmBx9DuEWk+KvdRnZb4/GsVIT7Wdp0stCgo5Rmz2U3+w3a/T0zeaWT
N6mn011lBScjWdUhZtcVYKwS6GRSJrTpqKaaCaCfuHkHZ8bDsS5O1mdnpa8ZiZLc
vue01G4WCQKmlI9aJAWonlG7w5csB+QwPAVRGvrHew7gRiWCYG+CcxtorDdmrHge
TqJwOZb9KoN2v0Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org